Burp Suite

GraphQL Exploitation: Secondary Context Attacks and Business Logic

Learn how GraphQL ID and String scalars enable path traversal-based secondary context attacks in BFF architectures. Two real-world critical exploits and defensive strategies.